Applicant : Norman H. Margolus et al. Attorney's Docket No.: 11656-004002 

Serial No. : 10/752,834 

Filed : January 7, 2004 

Page : 2 of 9 



Amendments to the Claims : 

This listing of claims replaces all prior versions and listings of claims in the 
application: 

Listing of Claims : 
1-61. (Cancelled) 

62. (Currently Amended) A method by which a disk-based distributed data storage 
system is organized for protecting historical records of stored data entities, the method 
comprising: 

recording distinct states of an entity stored data entities, corresponding to different 
moments of time, as separate a plurality of entity versions coexisting within the distributed data 
storage system; 

aooooiating timo int e rvalo with e ntity v e roiono, oorr e oponding to th e tim e s during which 
e ach e ntity voroion wao oonoidorod curr e nt; 

storing conies of an entity version that is one of the plurality of entity versions at each of 
a plurality of storage sites of the distributed data storage system: 

sharin g, among the plurality of storage sites, a set of rules-fef that restrict retaining 
deletion of the entity versio no among a plurality of storag e sit e s ; and 

designating com e e ntity v e rsions no d e l e tabl e and som e no und e l e tabl e . applying the 
shared set of rules independently at each of the plurality of storage sites r. to determine whether or 
not the copies of the entity version can be deleted; 

wherein if it is determined that the copies of the entity version cannot be deleted then 
they also cannot be modified; 
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wherein deletion of the copies of the entity version from the distributed data storage 
system is only allowed if the set of rules determine that the entity version can be deleted; and 

wherein an action taken bv a client program communicating with the disk-based 
distributed data storage system causes the shared set of rules to restrict deletion of the entity 
version and no subsequent action taken bv the client program can cause deletion to occur in 
violation of the restriction. 

63. (Currently Amended) The method of claim 62 in which, except for deletion, each of 
the plurality of entity versions sj=e is immutable. 

64. (Currently Amended) The method of claim 62 in which expiration times are alse 
assigned to seme the entity versions, independently within each of the plurality of storage sites, 
according to « the shared set of rules, before which times both modification and deletion is are 
prohibited. 

65. (Original) The method of claim 62 in which no single individual is given the authority 
to override the deletion prohibition at all of the plurality of storage sites. 

66-163. (Cancelled) 

164. (New) The method of claim 62 in which applying the set of rules at a one of the 
plurality of storage sites determines that the entity version can be deleted and a copy of the entity 
version is deleted immediately and storage space that was used to store the copy becomes 
available to store new data. 

165. (New) The method of claim 62 in which applying the set of rules determines that 
the entity version can be deleted but the copies of the entity version are only deleted if deletion is 
requested by a client of the disk-based distributed data storage system. 
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166. (New) The method of claim 62 in which the client program communicates with the 
disk-based distributed data storage system to request that the entity version be deleted, and 
applying the set of rules determines that the entity version cannot be deleted, and the storage 
system refuses to delete the entity version. 

167. (New) The method of claim 62 in which, during a time interval, the shared set of 
rules prohibits deletion of the entity version while others of the plurality of entity versions are 
allowed to be deleted. 

168. (New) The method of claim 167 in which the time interval is a year in length. 

169. (New) The method of claim 167 in which the client program communicates with the 
disk-based distributed data storage system in order to deposit the entity version, and no action 
taken by the client program during the time interval can cause the entity version to be deleted. 

170. (New) The method of claim 167 in which the client program causes the time 
interval during which deletion is prohibited to be extended and no subsequent action taken by the 
client program can cause the time interval to be shortened. 

171 . (New) The method of claim 167 in which the client program causes the length of 
the time interval to be set and no subsequent action taken by the client program can shorten the 
time interval. 

172. (New) The method of claim 171 in which the length of the time interval is initially 
not set and, before the length of the time interval is set, no action taken by the client program can 
cause the entity version to be deleted. 
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173. (New) The method of claim 167 in which no action taken by any client program 
that only communicates with the disk-based distributed data storage system over a wide area 
network can cause the time interval to be shortened. 

174. (New) The method of claim 62 in which the plurality of entity versions record 
historical states of a single stored data entity, with each of the plurality of entity versions 
associated with a historical time interval during which the recorded historical state was the state 
of the single stored data entity. 

175. (New) The method of claim 174 in which the shared set of rules that determine 
whether or not the entity version can be deleted depend at least in part on the length of the 
historical time interval associated with the entity version. 

176. (New) The method of claim 174 in which the shared set of rules that determine 
whether or not the entity version can be deleted depend at least in part on whether or not the 
historical time interval associated with the entity version includes a specified moment of time. 

177. (New) The method of claim 62 in which a stored data entity is a file in a file system 
or a record in a database or an object in an object storage system. 

178. (New) The method of claim 62 in which two of the plurality of storage sites are at 
least a mile apart. 

179. (New) The method of claim 62 in which the set of rules comprise a program that is 
separate and distinct from the software that implements the disk-based distributed data storage 
system and sharing occurs at the time when the plurality of entity versions are being stored in the 
storage system. 



